Email otisdub@otisdub.com. Expect to see an update on a reported vulnerability every week. Expect a reply to the email is the vulnerability is accepted or declined.